隱私權政策
律盟風險管理顧問股份有限公司（下稱「律盟風險管顧公司」）為提供「ESGoal風險管理平台」服務（下稱「本服務」），將基於本隱私權政策蒐集、處理、利用與保護使用者之個人資料，並依本隱私權政策告知使用者得如何就前述個人資料行使權利。當使用者開始使用本服務時，即表示使用者已充分閱讀、瞭解與同意接受本隱私權政策。
本隱私權政策適用範圍
本隱私權政策適用於使用者為使用本服務而提供律盟風險管顧公司之個人資料，包含律盟風險管顧公司為提供本服務將如何進行個人資料蒐集、處理、利用與保護，及使用者得如何就前述個人資料行使權利。
本隱私權政策不適用於本服務中所連結之外部服務（包含外部連結網站），亦不適用於非律盟風險管顧公司為提供本服務而委託或使之參與管理之人員。使用者已理解並同意該外部服務非屬本服務之內容，透過本服務連結至外部服務時，應自行參考該外部服務之隱私權保護政策內容。
蒐集之目的與類別
律盟風險管顧公司為完善提供本服務之目的，將依具體服務之內容與性質，於必要範圍內蒐集、處理及利用使用者之個人資料。非經使用者書面同意，律盟風險管顧公司不會將個人資料用於其他用途。律盟風險管顧公司為提供本服務之必要，得另行委託廠商或個人協助蒐集、處理或利用使用者個人資料，律盟風險管顧公司並將善盡監督管理之責。
除前述目的外，律盟風險管顧公司亦得為統計分析或學術研究之目的蒐集、處理並利用使用者之個人資料；就前述統計分析或學術研究結果之揭露，其揭露之方式將無從識別特定之使用者。
使用者得自由選擇是否提供個人資料（包含決定是否提供及提供之內容），惟使用者已理解並同意所提供之個人資料倘有不實或不全，恐無法完整使用本服務之全部或部分內容。
利用之地區與期間
律盟風險管顧公司僅在中華民國境內利用使用者之個人資料以提供本服務。
使用者為使用本服務所提供之個人資料，除經律盟風險管顧公司另行通知或於本服務內另有公告者外，將基於前述蒐集之目的保留五年。惟律盟風險管顧公司得視本服務之實際營運及維護需求，自行刪除相關資料，包括但不限於使用者已無使用本服務之權限、使用者超過五年未使用本服務、本服務之資料儲存空間不敷使用之情形。
個人資料之保護
本服務之平台所使用之主機或伺服器均設有防火牆、防毒系統等各項資訊安全設備及其他合理必要的安全防護措施，以保護平台及使用者之個人資料。惟使用者已理解並同意律盟風險管顧公司基於技術限制、可能存在之各種惡意手段或其他超越律盟風險管顧公司可控範圍之因素，無法保證使用者之個人資訊為百分之百安全。
使用者為本服務所提供之個人資料，僅限經律盟風險管顧公司為特別授權之人員始得接觸，且該等人員依法或依契約均對本服務之內容負有保密義務。律盟風險管顧公司為提供本服務之必要而另行委託廠商或個人協助蒐集、處理或利用使用者之個人資料時，律盟風險管顧公司亦將嚴格要求該廠商或個人切實遵守本隱私權政策並負有保密義務，且律盟風險管顧公司將採取必要措施以確保其切實遵守保密義務。
向第三人提供個人資料
除有下列情形者外，使用者理解並同意律盟風險管顧公司不會以任何形式（包括但不限於提供、交換、出租或出售）向第三人分享使用者之個人資料：
法律明文規定。
為增進公共利益所必要。
為免除使用者之生命、身體、自由或財產上之危險。
為防止他人權益之重大危害。
公務機關或學術研究機構基於公共利益為統計或學術研究而有必要，且資料經過律盟風險管顧公司處理後或經律盟風險管顧公司依其揭露方式無從識別特定之使用者。
經使用者書面同意。
有利於使用者權益。
個人資料之權利行使
使用者得隨時就使用者之個人資料，向律盟風險管顧公司：
請求查詢或閱覽。
請求製給複製本。
請求補充或更正。
請求停止蒐集、處理或利用。
請求刪除。
使用者透過本服務連結外部服務（包含外部連結網站）而被蒐集、處理及利用個人資料時，使用者理解並同意該外部服務非屬本服務之內容，使用者應自行參考該外部服務之隱私權保護政策內容為個人資料之權利行使。
Cookies之使用
本服務平台有可能在使用者的裝置設定並取用律盟風險管顧公司的Cookies。Cookies為透過律盟風險管顧公司平台傳送到使用者瀏覽器而記錄於使用者硬碟中之簡短資訊，供律盟風險管顧公司資訊系統識別使用者，並提供更完善之服務；
使用者所使用的瀏覽器內如有關於如何接受或拒絕Cookies之操作說明，使用者可設定是否接受本服務之Cookies。使用者已理解並同意倘使用者選擇拒絕Cookies，恐無法完整使用本服務之部分或全部內容。
下列情況，本服務之平台會寫入及讀取Cookies：
Cookies將在使用者登入網頁時建立，並在使用者離開時修改記錄。
統計本服務使用人數或分析使用模式，以作為改善本服務之參考。
為便利使用者使用本服務中其他服務項目而需記錄相關資訊時。
隱私權保護政策之修正
為因應相關法令之變更或本服務之實際需求，律盟風險管顧公司有權於任何時間更新（包含全部或部分條款之修改或變更）本隱私權政策。律盟風險管顧公司將發佈該等修改或變更於本服務平台內，而不向使用者為個別通知，建議使用者定期查閱本隱私權政策。
Privacy Policy
To provide the ESGoal services (“Services”), Leaven RM Consultancy Corp., Ltd. (“LRMC”), will collect, process, use and protect your personal data, and inform you on how to exercise your rights regarding such personal data in accordance with this Privacy Policy. You will be deemed to have fully read, understood, and agreed to this Privacy Policy when you start to use the Services.
I. Scope of Privacy Policy
This Privacy Policy applies to personal data you provide to LRMC for using the Services and includes terms on how LRMC collects, processes, uses and protects personal data to provide the Services, and how you could exercise rights regarding your personal data.
This Privacy Policy does not apply to external services linked to the Services (including external websites) or people not authorized or appointed by LRMC for providing the Services. You understand and agree that such external services are not part of the Services, and should consult the privacy policy of the external services when linking to them from the Services.
II. Purpose of Collection and Types of Personal Data
For the purposes of providing the Services, LRMC will, to the necessary extent, collect, process, and use your personal data in accordance with the terms and nature of the Services. LRMC will not use your personal data for any other purposes without your written consent. Where necessary, LRMC may engage vendors or individuals to collect, process, or use your personal data to provide the Services, and LRMC will endeavor to oversee and manage your personal data.
In addition to the purposes above, LRMC may collect, process, and use your personal data for data compilation and analysis, and/or academic research, provided that you are not identifiable through disclosure of such compiled data or analysis or academic research.
You are free to decide whether to provide your personal data (including whether and what to provide). However, you understand and agree that you might not be able to enjoy the Services in whole or in part if the personal data you have provided is erroneous or incomplete.
III.Territory and Term of Usage
LRMC will use your personal data to render the Services only within the territory of Taiwan (R.O.C.).
Personal data you provide for using the Services will be kept for five years for the purposes above unless otherwise notified by LRMC or announced in the Services. However, LRMC may delete data to meet the operational or maintenance needs of the Services, including but not limited to where you are no longer authorized to use the Services, or you have stopped using the Services for over five years, or there is not enough data storage space for the Services.
IV.Protection of Personal Data
The information security system and other reasonable and necessary data security measures, such as firewalls and antivirus software, are set up in the host and server used by the platforms of the Services, to protect the platforms and your personal data. However, you understand and agree that LRMC cannot fully secure your personal data owing to technical limitations, continually evolving hacks, and other factors beyond LRMC’s control.
Only personnel specifically authorized by LRMC, who bear duties of confidentiality regarding contents of the Services either by law or by contract, have access to personal data you have provided for the Services. Where LRMC engages vendors or individuals to help collect, process, or use your personal data, LRMC will strictly require that they observe faithfully this Privacy Policy and bear the duties of confidentiality, and LRMC will take necessary measures to ensure their faithful compliance with such duties.
V. Sharing Personal Data with Third Parties
Except in the circumstances below, you understand and agree that LRMC will not share your personal data with third parties in any manner (including but not limited to providing, exchanging, leasing, and selling personal data):
Where disclosure is expressly required by law.
Where disclosure is necessary for promoting the public interest.
Where disclosure is to prevent harm to your life, body, freedom, or property.
Where disclosure is to prevent material harm to the rights and interests of others.
Where disclosure is necessary for data compilation or academic research by a government agency or an academic institution for the public interest, and such data as processed or disclosed by LRMC is not personally identifiable according to its disclosure method.
Where you have given written consent.
Where disclosure is for your rights and interests.
VI.Exercise of Personal Data Rights
You may exercise the following rights for your personal data toward LRMC:
The right to look up or review your personal data.
The right to request a copy of your personal data.
The right to supplement or correct your personal data.
The right to demand the cessation of the collection, processing or use of your personal data.
The right to erase your personal data.
When you link to external services (including external websites) through the Services and your personal data is collected, processed or used, you understand and agree that such external services are not part of the Services, and should consult the privacy policy of the external services to exercise your rights regarding personal data.
VII.Use of Cookies
Platforms of the Services may set and access cookies of LRMC in your devices. Cookies are small text files sent from LRMC’s platforms to users’ browsers and stored on their hard drives for LRMC’s information system to identify users and provide them with better Services.
You can decide whether to accept cookies of the Services when such option is available according to the instruction in your browser. You understand and agree that you may be unable to enjoy the Services in whole or in part if cookies are rejected.
Platforms of the Services will write and read cookies:
when you log into the website, the record of whichwill be rewritten when you leave;
when tallying users or analyzing use patterns to improve the Services; or
when information has to be recorded to facilitate your use of other services in the Services.
VIII.Amending Privacy Policy
LRMC is entitled to update this Privacy Policy (including amendments or changes to the provisions hereof in whole or in part) at any time in response to changes of relevant laws and regulations and the needs of the Services. LRMC will announce such amendments or changes on the platforms of the Services rather than notifying you separately. You are recommended to revisit this Privacy Policy regularly.